Re: Mutual Authentication

[tplg]

Thank you for your answer.

But I used the following command :
# openssl pkcs12 -export -in usercert.pem -inkey userkey.pem -out cert.p12
Then I try to install it on my workstation (WinNT) and get a window telling:
"Invalid Public Key Security Object File
This is an invalid Personal Information Exchange File"
I don't understand, the user certificate in x509 format seemed to be valid, I  
succeed to installed it, indeed without privatekey...
Could you help me again ?

En réponse à Michael Sierchio <[EMAIL PROTECTED]>:

> [EMAIL PROTECTED] wrote:
> 
> > All those certificates are valid, and are in pem and x509 format.
> > When I add "SSLVerifyClient require" in httpd.conf, a window "Client
> 
> > Authentication" appear but I can not select any certificate!!
> > 
> > 1- It is important I can't install the user certificate in Personal
> tab ?
> > 2- It is for this reason I can't select it during the user
> authentication ?
> 
> You need not only a certificate, but the private key associated with
> it.  If you have the two -- usually in a PKCS#12 bundle -- you can
> install it as one of yours.  Otherwise, certificates are treated as
> client certs belonging to "others."  HTH
> 
> 
> -- 
> 
> "Well," Brahma said, "even after ten thousand explanations, a fool is
> no
>   wiser, but an intelligent man requires only two thousand five
> hundred."
>  - The Mahabharata
> 
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]
> 
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Mutual Authentication

[tplg]

Hello,

I would like to use mutual authentication : authenticate the server and the 
user.
I created a CA, a server and a client certificate signed by this CA.
I installed the CA certificate on my IE. I tested a connection to my server and 
the server authentication seems to be good. 
I installed my user certificate on IE but it appear in "Other People" and not 
in "Personal" tab.
All those certificates are valid, and are in pem and x509 format.
When I add "SSLVerifyClient require" in httpd.conf, a window "Client 
Authentication" appear but I can not select any certificate!!

1- It is important I can't install the user certificate in Personal tab ?
2- It is for this reason I can't select it during the user authentication ?
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]